Research And Implementation The System Of File Authorization Between Multiple Users Based PKI

Document as an important way of information exchange, the rapid development in information technology today, its demanding security is increasingly important. Currently document security solutions are mainly control access permissions based system, file encryption systems, the lack of a simple and convenient way to secure file permissions authorization.Through research and analysis of the digital envelope PKI and digital signature, made between multi-user document mandated programs. On the one hand, a method of document security authorization to extract the encryption key to encrypt data, digital signature information for unified management, to complete the document on the basis of authorization, easy file transfer between multiple users, to ensure the security documents; the other hand, made small files handled by Redis cache based on HDFS merge files, through the HDFS reasonably optimized storage platform built to ensure efficient access to encrypted data.In the design and implementation of this system, build the appropriate platform to generate a digital certificate EJBCA and achieve an independent transmission module to complete the authorization Socket client and storage platforms transmission. Through experiments, verify that the file authorization between multiple users, and the results were analyzed storage optimization. The results show that multi-user document authorized clients better finished document authorized the operation, improvement and optimization of HDFS storage more efficient processing of small files. Authorized clients and in HDFS optimized storage platform based on a multi-user file jointly completed authorization system to ensure the security of the file transfer authorization, user access convenience.